We are seeking a Mid-to-Senior Network Software Engineer to help design, build, and operate the networking platform that powers large-scale cloud-native infrastructure.
This role sits at the intersection of software engineering, platform engineering, distributed systems, cloud networking, and networking infrastructure. You will work on technologies including Kubernetes, Cilium/eBPF, Envoy Proxy, Contour, service mesh, and cloud networking across AWS and Azure.
A key part of this role is building and evolving custom networking control planes that translate high-level application and networking intent into dynamic proxy and dataplane configuration.
What You Will Do:
- Build Network Control Planes: Design, develop, and operate custom Kubernetes-native networking control planes, similar to architectures used by Istio and Contour, that translate declarative APIs and configuration into dynamically programmed data planes.
- Program Envoy via xDS: Build and maintain control-plane integrations using Envoy xDS APIs, including LDS, RDS, CDS, and EDS, to dynamically configure listeners, routes, clusters, endpoints, and traffic policies.
- Build Cloud-Native Networking Platforms: Design and operate Kubernetes networking capabilities including CNI, network policy, service routing, load balancing, DNS.
- Work with Cilium: Deploy, operate, and optimize Cilium-based Kubernetes networking, including network policy and observability
- Extend Proxy Capabilities: Develop or integrate Envoy filters, extensions, external authorization, traffic policies, authentication/authorization mechanisms, and other L4/L7 capabilities.
- Design Cloud Networking: Work with networking services across AWS and Azure, including VPC/VNet networking, load balancers, NAT, routing, private connectivity.
- Build Network Observability: Develop telemetry and troubleshooting capabilities using metrics, logs, tracing, network flows, Hubble, OpenTelemetry, Prometheus, and Grafana.
- Drive Reliability at Scale: Participate in architecture reviews, production readiness, incident response, root-cause analysis and reliability improvements for critical networking infrastructure.
- Shape Next-Generation Networking: Evaluate emerging technologies including Gateway API, eBPF networking, AI/agent gateways, MCP, Agent-to-Agent (A2A) protocols, and agent/service mesh architectures.
- Participate in On-Call Rotation: Participate in the team's on-call rotation to support production networking infrastructure, solve incidents, restore service, and drive root-cause analysis and long-term reliability improvements.
What We Are Looking For:
- Software Engineering: 4+ years of experience developing production software, infrastructure platforms, networking systems, or distributed systems.
- Programming: Strong proficiency in Go and experience with one or more languages such as Python, Rust
- Networking Control Planes: Experience building, extending, or maintaining networking control-plane implementations similar to Istio, Contour, Envoy Gateway, or other Envoy/xDS-based platforms.
- Kubernetes Networking: Strong understanding of CNI, Services, NetworkPolicy, Ingress, Gateway API, DNS, service discovery, load balancing, and pod networking.
- Networking Fundamentals: Knowledge of TCP/IP, UDP, DNS, HTTP/1.1, HTTP/2, HTTP/3/QUIC, gRPC, TLS/mTLS, NAT, routing, and load balancing.
- Proxy & Application Networking: Direct involvement in using Envoy Proxy, Contour, Istio, NGINX, HAProxy, or similar L4/L7 proxy technologies.
- Linux Networking: Experience fixing network namespaces, routing tables, iptables/nftables, sockets, conntrack, DNS, and packet-level traffic flows.
- Cloud Networking: Experience with networking in at least one major cloud platform such as AWS, Azure.
- Infrastructure Automation: Experience with GitOps, Argo CD, Helm, and CI/CD automation.
Preferred Qualifications- Experience designing or contributing to a custom Envoy-based control plane.
- Experience with Envoy xDS APIs (LDS, RDS, CDS, EDS) and dynamic configuration management.
- Experience with Contour, Istio, Envoy Gateway, Gateway API, or similar application-networking platforms.
- Experience developing Kubernetes CRDs, controllers, operators, admission webhooks, or API extensions.
- Hands-on experience with Cilium based networking.
- Experience operating networking infrastructure across large multi-cluster and multi-region Kubernetes environments.
- Experience with Hubble, OpenTelemetry, Prometheus, Grafana, distributed tracing, or network-flow analytics.
Expected Pay Range:Our compensation reflects the cost of labor across several U.S. geographic markets, and we pay differently based on those defined markets. The U.S. pay range for this position is $139,000 - $257,550 annually. Pay within this range varies by work location and may also depend on job-related knowledge, skills, and experience. Your recruiter can share more about the specific salary range for the job location during the hiring process.In California, the pay range for this position is $177,900 - $257,550
At Adobe, for sales roles starting salaries are expressed as total target compensation (TTC = base + commission), and short-term incentives are in the form of sales commission plans. Non-sales roles starting salaries are expressed as base salary and short-term incentives are in the form of the Annual Incentive Plan (AIP).
In addition, certain roles may be eligible for long-term incentives in the form of a new hire equity award.
